$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: AaMdhps9kd59WfvNzyjZF+6GfaqIrvQIOrdDVTNjudE= Subject key identifier: 3B:3B:2E:8A:DE:04:D4:26:6C:A5:EE:F3:0F:48:CD:49:C0:C4:04:D3 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 13FB84FAEDA99F1E6C15624C5573AADD0175BB7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0340 Signing time: Sun 29 Jun 2025 12:41:15 +0000 Manifest this update: Sun 29 Jun 2025 12:36:15 +0000 Manifest next update: Thu 03 Jul 2025 00:23:15 +0000 Files and hashes: 1: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 2: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: hLAU+CIw26pm60zSSYQiresebyI2T1ZRCt9KQ72sR3Y=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fb:84:fa:ed:a9:9f:1e:6c:15:62:4c:55:73:aa:dd:01:75:bb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Jun 29 12:36:15 2025 GMT Not After : Jul 3 00:23:15 2025 GMT Subject: CN=3B3B2E8ADE04D4266CA5EEF30F48CD49C0C404D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:d8:b7:26:24:d4:c6:fe:ff:b9:c1:7b:78: a2:d4:1d:21:d3:6d:34:19:e4:c9:aa:a8:c9:60:8e: 40:a1:ef:74:70:7a:39:4d:5d:d0:a0:8d:0e:f6:79: 31:14:9d:8d:ac:e7:bc:b4:ff:2e:01:82:24:d9:94: 7f:2c:72:6b:52:3a:dd:81:f2:35:cf:c2:a9:70:ae: 6d:84:15:83:ce:f9:58:8d:5f:46:50:58:2c:0c:5f: f9:bd:07:fd:38:c7:82:8e:80:06:45:e4:3f:f0:83: 6a:0b:f0:81:fb:0a:61:dd:56:93:d2:c8:e6:48:5d: ef:fd:22:42:1b:6f:49:10:37:8a:bc:70:9d:8a:c9: cb:d5:eb:8f:64:32:1a:23:ca:ce:32:36:c7:16:f8: ff:90:6f:69:94:49:ca:b0:fe:a0:15:75:f0:ba:c9: 00:7a:38:d9:b9:c4:e9:0e:bd:e9:8f:0a:cd:33:31: 93:e7:20:de:b4:9f:70:83:92:5b:8b:54:78:8e:85: 09:54:40:56:e4:25:38:74:1f:d1:7b:d0:26:52:3e: 17:57:81:dc:f6:fb:90:ff:5c:d8:55:d6:6f:2c:ce: bb:21:54:93:db:e2:f6:03:cb:a2:7b:58:99:61:69: 74:43:1d:d1:c9:be:bb:fc:49:a1:6d:28:6a:46:f3: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3B:2E:8A:DE:04:D4:26:6C:A5:EE:F3:0F:48:CD:49:C0:C4:04:D3 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:29:3e:cd:de:de:7f:c4:f9:17:0f:b7:f5:cc:ec:58:a1:a0: ff:4d:07:c3:02:5e:7e:89:4c:53:fc:08:85:00:ed:2c:eb:70: 33:a3:2c:39:63:03:e0:71:cd:ec:fa:ef:14:cd:22:55:20:de: 7b:dd:02:79:dd:04:b8:2c:0b:8b:dc:8d:7a:8c:52:12:36:c4: 9f:ae:44:b5:3d:36:4b:c4:1d:08:a1:20:6e:87:a7:5b:fe:dc: f5:0c:47:37:86:9e:4a:c5:96:43:f0:72:ee:71:70:3e:72:03: b5:10:99:9f:56:d6:08:fd:de:27:64:5f:45:af:f4:20:5d:1f: 1c:09:8c:9d:8e:22:aa:ef:91:e5:65:35:1b:22:53:03:f8:a7: 0f:78:86:27:ca:7e:25:ac:eb:b9:8a:bf:83:41:b2:34:36:f5: b0:48:3e:fc:c7:11:00:68:84:e3:65:81:15:e8:85:86:14:43: 72:95:d3:e2:b4:d9:13:42:c1:dc:02:96:95:33:1f:ff:3a:6e: a5:76:e6:08:83:9b:ed:08:6a:bf:c4:60:8a:04:88:44:fd:13: 10:4b:d7:72:e3:27:27:2a:60:5b:a9:99:b8:be:aa:91:ef:84: 21:5a:2f:37:48:fd:cf:4c:4c:4c:9f:6d:54:d9:84:1f:bb:bb: 35:aa:69:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/uE+u2pnx5sFWJMVXOq3QF1u3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA2MjkxMjM2MTVaFw0yNTA3MDMwMDIzMTVaMDMxMTAvBgNV BAMTKDNCM0IyRThBREUwNEQ0MjY2Q0E1RUVGMzBGNDhDRDQ5QzBDNDA0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhH9i3JiTUxv7/ucF7eKLUHSHT bTQZ5MmqqMlgjkCh73RwejlNXdCgjQ72eTEUnY2s57y0/y4BgiTZlH8scmtSOt2B 8jXPwqlwrm2EFYPO+ViNX0ZQWCwMX/m9B/04x4KOgAZF5D/wg2oL8IH7CmHdVpPS yOZIXe/9IkIbb0kQN4q8cJ2KycvV649kMhojys4yNscW+P+Qb2mUScqw/qAVdfC6 yQB6ONm5xOkOvemPCs0zMZPnIN60n3CDkluLVHiOhQlUQFbkJTh0H9F70CZSPhdX gdz2+5D/XNhV1m8szrshVJPb4vYDy6J7WJlhaXRDHdHJvrv8SaFtKGpG89IZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzsuit4E1CZspe7zD0jNScDEBNMwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwpPs3e3n/E+RcPt/XM7FihoP9NB8MCXn6J TFP8CIUA7SzrcDOjLDljA+Bxzez67xTNIlUg3nvdAnndBLgsC4vcjXqMUhI2xJ+u RLU9NkvEHQihIG6Hp1v+3PUMRzeGnkrFlkPwcu5xcD5yA7UQmZ9W1gj93idkX0Wv 9CBdHxwJjJ2OIqrvkeVlNRsiUwP4pw94hifKfiWs67mKv4NBsjQ29bBIPvzHEQBo hONlgRXohYYUQ3KV0+K02RNCwdwClpUzH/86bqV25giDm+0Iar/EYIoEiET9ExBL 13LjJycqYFupmbi+qpHvhCFaLzdI/c9MTEyfbVTZhB+7uzWqaVI= -----END CERTIFICATE-----Generated at Mon Jun 30 07:48:59 2025 by rpki-client